Twin Brothers Convicted of Deleting Government Databases Maintained by Former Employer Opexus

Muneeb Akhter collected approximately 5,400 usernames and passwords from Opexus's network and built custom scripts to test the collected usernames and passwords against external sites including Marriott and DocuSign. He successfully logged into accounts using stolen credentials and in some cases used victims' airline miles.

On February 1, 2025, Muneeb Akhter asked Sohaib Akhter for the plaintext password of an individual who had filed a complaint through the EEOC Public Portal.

Sohaib Akhter ran a database query and provided the plaintext password to Muneeb Akhter. Muneeb Akhter used the obtained EEOC complainant credentials to access the complainant's email without authorization. 2 million lines of full names, email addresses, phone numbers, physical addresses, and password hashes.

2 million line data file was stored across Muneeb Akhter's personal laptop, Android phone, external hard drive, and cloud accounts. py and ran credential-stuffing attacks on hotels, airlines, and banks. com.

He continued actively using the stolen credentials from May 2025 until his arrest on December 3, 2025. Muneeb Akhter used stolen American Airlines miles twice: 29,000 miles for a SLC to DC flight on November 29, 2025 that he took, and 14,500 miles for another ticket he booked but did not use. The brothers' actions followed a decade-old criminal record.

In 2015, Muneeb Akhter and Sohaib Akhter pleaded guilty to conspiracy to commit wire fraud and conspiracy to access protected computers without authorization. U.S. State Department systems and a private company and stealing personal data.

Muneeb Akhter received a 39-month prison sentence for the 2015 crimes. Both served their prison sentences and were released. By 2023-2024, Muneeb Akhter and Sohaib Akhter had obtained engineering roles at Opexus, formerly known as AINS.

Opexus systems host sensitive government data on servers in Ashburn, Virginia. Its flagship products are FOIAXpress and the eCASE suite. Opexus conducted standard background checks covering roughly seven years.

The seven-year background checks by Opexus missed the brothers' 2015 convictions. Opexus later admitted that additional diligence should have been applied in hiring the Akhter brothers. The individuals responsible for hiring the Akhter brothers at Opexus are no longer with the company.

On February 18, 2025, the FDIC flagged Sohaib Akhter's prior conviction during a background check for a potential new role at the FDIC Office of Inspector General. Muneeb Akhter had a separate aggravated identity theft count from August 2022 involving someone’s passport and personal info.

On February 24, 2025, Muneeb Akhter fled with a government-issued PIV card along with his personal laptop and phone.

30-caliber ammunition. 38 Special revolver. Muneeb Akhter pleaded guilty to computer fraud and destruction of records. On May 7, 2026, a federal jury in Alexandria convicted Sohaib Akhter on three counts: conspiracy to commit computer fraud, password trafficking, and possession of a firearm by a prohibited person.

Sohaib Akhter faces a maximum of 21 years in prison and is scheduled for sentencing on September 9, 2026. Muneeb Akhter faces potential penalties up to 45 years. @zerohedge reported the details of the case drawn from court documents, government statements and company admissions.